[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

POSIX capabilities patch



In order to get realtime capabilities, jackd can be run with a suid
wrapper (jackstart), instead of being run as root, if the following
patch is applied to the kernel:

--- capability.h.old    2003-11-11 19:57:49.000000000 -0700
+++ capability.h        2003-11-11 19:56:55.000000000 -0700
@@ -303,8 +303,8 @@
 
 #define CAP_EMPTY_SET       to_cap_t(0)
 #define CAP_FULL_SET        to_cap_t(~0)
-#define CAP_INIT_EFF_SET    to_cap_t(~0&~CAP_TO_MASK(CAP_SETPCAP))
-#define CAP_INIT_INH_SET    to_cap_t(0)
+#define CAP_INIT_EFF_SET    to_cap_t(~0)
+#define CAP_INIT_INH_SET    to_cap_t(~0)
 
 #define CAP_TO_MASK(x) (1 << (x))
 #define cap_raise(c, flag)   (cap_t(c) |=  CAP_TO_MASK(flag))

Would it be inappropriate to create a kernel-patch package for this
patch?  What should I call it? (I'm thinking kernel-patch-rtcap or
kernel-patch-capability)

1. http://jackit.sourceforge.net/docs/faq.php#a5
2. http://www.tml.hut.fi/~tilmonen/givertcap/
3. http://ftp.kernel.org/pub/linux/libs/security/linux-privs/kernel-2.4/capfaq-0.2.txt

-- 
 Hans Fugal                 | De gustibus non disputandum est.
 http://hans.fugal.net/     | Debian, vim, mutt, ruby, text, gpg
 http://gdmxml.fugal.net/   | WindowMaker, gaim, UTF-8, RISC, JS Bach
---------------------------------------------------------------------
GnuPG Fingerprint: 6940 87C5 6610 567F 1E95  CB5E FC98 E8CD E0AA D460

Attachment: pgpA_wsoaYqTX.pgp
Description: PGP signature


Reply to: